Notice pursuant to Regulation (EU) 2016/679 (GDPR) and the applicable national legislation in Italy (Legislative Decree 196/03)
1. General information
Pettenon Cosmetics S.p.A. SB (hereinafter also referred to as the “Company” or “Pettenon”) informs you (hereinafter also referred to as the “User”) that, for the purposes indicated below, it will process your personal data (or the data of the company/firm you represent if you are acting on its behalf) that you have provided. Only the data necessary for the achievement of the purposes indicated in this notice will be requested and processed. Please note that you should only provide your data and/or the data of the company/firm you represent. If you are acting on behalf of a company/firm, the activities outlined in this notice will be carried out with respect to the company/firm using the data you have provided, and you will be consenting to the processing (where consent is required) on behalf of the company/firm you represent.
2. Purposes and Legal Basis
The data will be processed by the Company:
A. For the purpose of responding to your information request, subject to your consent, and taking all necessary actions to fulfill your request; the legal basis for the processing is consent.
B. To comply with an obligation established by law, regulation, or European Union legislation; the legal basis is the fulfillment of legal obligations.
C. For legitimate interests such as asserting or defending a right of the Company; the legal basis is the pursuit of legitimate interests.
3. Mandatory Data Provision
PURPOSES UNDER POINT 2 (A)
You are free to provide or not provide your personal data for the purposes indicated in point 2 (A) of the notice, as well as to give or not give consent. However, without the provision of data and consent, the Company will not be able to respond to your request.
PURPOSES UNDER POINT 2 (B) AND 2 (C)
The provision of data for the purposes indicated in point 2 (B) and 2 (C) of this notice is necessary, and failure to provide it will result in Pettenon being unable to carry out the activities mentioned in the previous points.
4. Categories of Data Recipients
For the purposes indicated in point 2 (A), the data will not be disclosed to third parties unless the disclosure is necessary based on your request (e.g., to postal/courier services in case of a request for shipping paper materials).
For the purposes indicated in point 2 (B) of this notice, the data may be disclosed by Pettenon to public authorities, judicial authorities, and law enforcement agencies.
For the purposes indicated in point 2 (C) of this notice, the data may be disclosed by Pettenon to legal consultants, public authorities, judicial authorities, law enforcement agencies, and postal services (as they may see the address for sending any written communications).
Pettenon will only disclose the data necessary for achieving the specific purposes indicated in this notice.
The data may also be accessed, each in their role, by all individuals delegated by the Company (public relations staff, including those external to the Company, IT staff, including those external to the Company who may sometimes act as system administrators and are appointed as such, consultants, including external consultants, such as IT technicians who may sometimes act as system administrators and are appointed as such, legal consultants, interns, website management staff, including those external to the Company, staff in the department handling the matters of your request, legal practitioners, and collaborators of the data controllers) and by the data processors appointed by Pettenon (e.g., IT outsourcing companies). The list of data processors is always available by contacting the Company at the addresses provided in point 6. The data processors will only process the data necessary for performing the assigned tasks.
5. Data Retention
The data may be retained and processed by the Company for the entire period necessary to achieve the purposes outlined in this notice. The data retention period is as follows:
- For legal obligations, regulations, and EU legislation, for the periods imposed by these regulatory sources;
- For the purposes indicated in point 2 (A) for 6 months from the final response to the request, subject to retention for the purposes indicated in points 2 (B) and 2 (C);
- In any case, all data may be retained for a period necessary to assert or defend a right of the Company based on Italian and European regulations.
6. Data Controller and Data Protection Officer
The Data Controller of the data provided is: Pettenon Cosmetics S.p.A. SB, located at Via del Palù, 7d, 35018 San Martino di Lupari PD, Tel. +39 049 99888, FAX +39 049 9988809, privacy@pettenon.it.
The Company has a Data Protection Officer, who can be contacted at the Company's headquarters at Via del Palù, 7/d, 35018 - San Martino di Lupari (PD), and at the email address privacy@pettenon.it.
7. Rights
We inform you that the GDPR provides the data subject with the possibility to request from the Company (at the above-mentioned addresses) access to personal data, rectification of data, deletion of data, or restriction of processing, data portability; the data subject may also object to the processing of data and exercise other rights contained in Chapter 3, Section 1 of the GDPR, including the right to withdraw consent where provided: the withdrawal of consent does not affect the lawfulness of processing based on consent given before the withdrawal.
8. Complaints
If you believe that the processing of your data violates the provisions of the GDPR and privacy regulations, you can always lodge a complaint with the Italian Data Protection Authority, whose contact details are available on the website www.garanteprivacy.it.
9. Processing Methods
We inform you that the data will be processed using electronic and paper/manual tools, adopting suitable protection systems to ensure confidentiality. All data will be retained and processed in full compliance with confidentiality, in accordance with all applicable regulations (including principles of fairness, lawfulness, transparency, confidentiality, and rights protection) and strictly related to the purposes indicated in this notice. Only the operations necessary to achieve the purposes indicated in this notice will be performed on the data. The data will be retained at the Company's headquarters or server farm for the Company and at the offices or server farms of the data processors. Data disclosed to third parties will be retained and processed by them independently. The data will also be organized into databases, including electronic databases.
Notice updated on 07/08/2024
Previous notices are available by writing to the Company at the addresses indicated above.